3 ms·
Without HTTPS in the main site that is mostly useless
by nmat 13y ago
Without HTTPS in the main site that is mostly useless
- lstamour 13y agoTrue. Though for a bit of benefit, if the download was hosted separately from the site, that'd be two things to hack. The downside, of course, is that script updates would require new SHA1s. It would be best, then, to insert version numbers into the installer scripts, and a version check. That way if a new version comes out, the installer could warn about it (y/n), while still verifying the SHA1.